$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft File: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft (raw, json) Hash identifier: /bZ/bRLzwvrwgTZ3fyE4rmAFcLcEN02IZFvoF++EWwo= Subject key identifier: CA:09:80:51:4C:C7:AA:9D:62:86:F8:11:59:97:C0:D7:4A:BC:0E:9D Authority key identifier: BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE Certificate issuer: /CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Certificate serial: 59DFDA411408DE4ACB0843D0657B496C70A6919A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:16:44 +0000 Manifest this update: Wed 16 Sep 2026 18:11:44 +0000 Manifest next update: Thu 17 Sep 2026 18:28:44 +0000 Files and hashes: 1: 3130332e32322e39382e302f32342d3234203d3e20313530323433.roa (hash: u+2M/bTSruaNYmfOr6yekhQrDfOBud5yonvhzBxXBPo=) 2: BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl (hash: cJfzufZ0XVHgNra4teaDy0lVJZjyhwMX89RRoUzMrCE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:28:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:df:da:41:14:08:de:4a:cb:08:43:d0:65:7b:49:6c:70:a6:91:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE Validity Not Before: Sep 16 18:11:44 2026 GMT Not After : Sep 17 18:28:44 2026 GMT Subject: CN=CA0980514CC7AA9D6286F8115997C0D74ABC0E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ac:5c:af:b0:30:b5:d5:7e:21:fe:af:ac:f3: 53:e8:14:0a:38:7a:9c:f9:22:5f:48:d9:9c:0a:24: 24:a2:59:5a:b6:46:31:6e:87:bf:7d:38:80:aa:58: 85:dd:69:33:23:63:39:6b:e1:d6:eb:85:0b:57:8b: 13:b8:a0:e9:88:0d:33:31:54:9d:6d:1e:49:a0:c7: 5a:dc:00:e6:14:e4:ca:99:d0:0c:c2:f7:2b:39:8c: 5c:eb:ab:9b:75:a5:52:5c:86:0a:0b:e0:58:39:72: 01:b0:f0:7a:8f:17:52:ee:0f:28:7a:e0:ba:cc:c2: 7c:60:05:b5:ce:f6:e2:9e:39:a1:f8:10:d6:4f:56: 80:ee:79:39:cd:0f:79:a0:bf:f2:63:00:c1:be:e0: a6:1d:5d:1c:e3:1b:99:fa:90:2d:33:aa:a6:d2:1e: 64:ab:96:c4:89:a2:f0:c7:8b:b8:c4:79:ee:de:bf: 36:31:3b:c8:7a:0c:17:52:e5:92:ad:38:f6:00:8c: 69:41:05:05:91:ac:04:54:93:22:44:e5:64:43:5a: a1:9f:82:1e:07:e2:4f:66:ed:f3:68:b1:56:60:d3: d7:7e:7b:31:da:95:e4:3a:bb:e1:fc:18:e1:f6:09: 5d:b4:a2:2f:1a:1a:08:70:c0:12:20:64:f7:87:67: 50:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:09:80:51:4C:C7:AA:9D:62:86:F8:11:59:97:C0:D7:4A:BC:0E:9D X509v3 Authority Key Identifier: keyid:BA:9D:A3:D5:58:0D:59:97:77:4E:B2:75:E9:77:8C:2A:F4:D3:A1:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d701b277-c80c-45d5-8089-a9efa340542a/0/BA9DA3D5580D5997774EB275E9778C2AF4D3A1AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:8e:fe:b0:22:57:1d:e3:8a:14:02:53:dc:aa:7d:f3:5f:bc: 9a:66:af:e3:e4:14:d2:0d:a2:8f:86:a2:79:8f:75:0e:13:8c: ae:1d:f6:75:f0:b6:0e:2d:2e:96:b3:d1:56:0b:a3:df:f6:10: 72:72:4b:b3:89:c5:00:5c:37:5d:af:9c:a2:09:7a:65:22:b2: 2b:24:55:0e:d7:67:5c:69:01:2e:b8:0c:c4:3f:9a:59:11:3e: 73:22:56:bb:c6:54:cb:16:f6:00:29:35:be:e8:aa:cb:d9:7b: 20:68:cb:83:b8:ee:c5:ad:17:64:6d:c6:fe:dc:15:2e:89:84: a9:84:26:4d:2f:9e:62:48:44:1f:9a:32:5d:b0:f2:a3:e9:3f: a9:d8:3f:f2:32:fa:4a:ed:3d:96:45:fc:c8:02:a5:40:f8:b7: 69:6a:ce:70:9b:d8:3e:92:1f:bb:1a:9f:d6:95:c7:ba:52:e0: 22:f0:8a:e1:ba:6f:c4:b2:ea:2a:70:7e:2e:b9:1c:be:06:fd: e2:3e:d7:d9:c2:f7:a0:3d:4c:8c:ae:3f:e6:59:04:74:4a:38: 5c:50:83:02:1b:a1:f0:0b:d7:c9:69:b3:e9:05:71:e7:5f:fc: db:c3:69:11:c0:20:fc:05:fe:32:c2:5b:3e:0f:e5:21:59:96: d1:b9:e1:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWd/aQRQI3krLCEPQZXtJbHCmkZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFG NEQzQTFBRTAeFw0yNjA5MTYxODExNDRaFw0yNjA5MTcxODI4NDRaMDMxMTAvBgNV BAMTKENBMDk4MDUxNENDN0FBOUQ2Mjg2RjgxMTU5OTdDMEQ3NEFCQzBFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnrFyvsDC11X4h/q+s81PoFAo4 epz5Il9I2ZwKJCSiWVq2RjFuh799OICqWIXdaTMjYzlr4dbrhQtXixO4oOmIDTMx VJ1tHkmgx1rcAOYU5MqZ0AzC9ys5jFzrq5t1pVJchgoL4Fg5cgGw8HqPF1LuDyh6 4LrMwnxgBbXO9uKeOaH4ENZPVoDueTnND3mgv/JjAMG+4KYdXRzjG5n6kC0zqqbS HmSrlsSJovDHi7jEee7evzYxO8h6DBdS5ZKtOPYAjGlBBQWRrARUkyJE5WRDWqGf gh4H4k9m7fNosVZg09d+ezHaleQ6u+H8GOH2CV20oi8aGghwwBIgZPeHZ1BHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygmAUUzHqp1ihvgRWZfA10q8Dp0wHwYDVR0j BBgwFoAUup2j1VgNWZd3TrJ16XeMKvTToa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDcwMWIyNzctYzgwYy00NWQ1LTgwODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1 ODBENTk5Nzc3NEVCMjc1RTk3NzhDMkFGNEQzQTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CQTlEQTNENTU4MEQ1OTk3Nzc0RUIyNzVFOTc3OEMyQUY0RDNB MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDcwMWIyNzctYzgwYy00NWQ1LTgw ODktYTllZmEzNDA1NDJhLzAvQkE5REEzRDU1ODBENTk5Nzc3NEVCMjc1RTk3NzhD MkFGNEQzQTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiO/rAiVx3jihQCU9yqffNfvJpmr+PkFNIN oo+GonmPdQ4TjK4d9nXwtg4tLpaz0VYLo9/2EHJyS7OJxQBcN12vnKIJemUisisk VQ7XZ1xpAS64DMQ/mlkRPnMiVrvGVMsW9gApNb7oqsvZeyBoy4O47sWtF2Rtxv7c FS6JhKmEJk0vnmJIRB+aMl2w8qPpP6nYP/Iy+krtPZZF/MgCpUD4t2lqznCb2D6S H7san9aVx7pS4CLwiuG6b8Sy6ipwfi65HL4G/eI+19nC96A9TIyuP+ZZBHRKOFxQ gwIbofAL18lps+kFcedf/NvDaRHAIPwF/jLCWz4P5SFZltG54UE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:44:52 2026 by rpki-client